Thank you for your answer!
We don't have any security. When we open the Kibana web page, there is no authentication previously. The same happens when we go into the Elasticsearch port (http://###.###.###.###:9200).
Does that means that I won't be able to connect to Elasticsearch from OA Desktop unless we acquire xPack?